< back to search

shield Security update for perl-xml-twig
SUSE-SLE-SERVER-12-SP2-2021-666

This update for perl-XML-Twig fixes the following issues: - Security fix [bsc#1008644, CVE-2016-9180] * Added: the no_xxe option to XML::Twig::new, which causes the parse to fail if external entities are used (to prevent malicious XML to access the filesystem). * Setting expand_external_ents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use no_xxe. * Update documentation for XML::Twig to mention problems with expand_external_ents and add information about new no_xxe argument

  • Release Date
    Mar 1 2021
  • References
    Bugzilla: 1008644
    CVEs: CVE-2016-9180
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12.2 ppc64le
  • Packages
    perl-XML-Twig
    A perl module for processing huge XML documents in tree mode.
    3.44-5.3.1 lock rpm lock src
SUSE Linux Enterprise Server LTSS 12.2 s390x
  • Packages
    perl-XML-Twig
    A perl module for processing huge XML documents in tree mode.
    3.44-5.3.1 lock rpm lock src
SUSE Linux Enterprise Server LTSS 12.2 x86_64
  • Packages
    perl-XML-Twig
    A perl module for processing huge XML documents in tree mode.
    3.44-5.3.1 lock rpm lock src